/dev/urandom is usually pseudo random, so as an initialization for SHA1PRNG random number generator it is not good enough. OpenSSL on most Unix-alike platforms

/dev/urandom is usually pseudo random, so as an initialization for SHA1PRNG random number generator it is not good enough. OpenSSL on most Unix-alike platforms has been seeding its default CSPRNG (which uses SHA-1 internally unless you've built OpenSSL without SHA-1 support) from /dev/urandom for over a decade. I don't understand why has everyone suddenly started framing /dev/urandom as a gigantic crypto bogeyman to be avoided at all costs. It just isn't so.